This Personal Data Processing Policy has been drawn up in accordance with the requirements of Federal Law No. 152-FZ dated 27 July 2006, On Personal Data (the "Personal Data Law"), and establishes the procedure for processing personal data and the measures taken to ensure the security of personal data by Individual Entrepreneur Anna Valentinovna Taratorkina (OGRNIP 318774600364286, INN 772604109128) (the "Operator").
1.1. The Operator regards the observance of human and civil rights and freedoms when processing personal data, including the protection of the rights to privacy and to personal and family secrecy, as a paramount objective and a prerequisite for its activities.
1.2. This Personal Data Processing Policy of the Operator (the "Policy") applies to all information that the Operator may obtain about visitors to the website __________________________.
2.1. Automated processing of personal data means the processing of personal data using computer technology.
2.2. Blocking of personal data means the temporary suspension of personal data processing (except where processing is necessary to clarify personal data).
2.3. Website means a collection of computer programs and other information contained in an information system, access to which is provided through the Internet information and telecommunications network (the "Internet") using domain names and/or network addresses that make it possible to identify websites on the Internet, at the network address _______________________.
2.4. Personal data information system means a set of personal data contained in databases and the information technologies and technical means used to process such data.
2.5. Depersonalization of personal data means actions as a result of which it is impossible, without using additional information, to determine whether personal data belong to a specific User or another personal data subject.
2.6. Processing of personal data means any action (operation) or set of actions (operations) performed with or without automated means in relation to personal data, including collection, recording, systematization, accumulation, storage, clarification (updating or alteration), retrieval, use, transfer (distribution, provision or access), depersonalization, blocking, deletion and destruction of personal data.
2.7. Operator means Individual Entrepreneur Anna Valentinovna Taratorkina (OGRNIP 318774600364286, INN 772604109128).
2.8. Personal data means any information relating directly or indirectly to an identified or identifiable User of the website _________________ .
2.9. Personal data authorized by the personal data subject for distribution means personal data to which the personal data subject has granted access to an unlimited number of persons by consenting to the processing of personal data authorized by the personal data subject for distribution in accordance with the procedure established by the Personal Data Law (the "personal data authorized for distribution").
2.10. User means any visitor to the website _____________________.
2.11. Provision of personal data means actions aimed at disclosing personal data to a specific person or a specific group of persons.
2.12. Distribution of personal data means any actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or making personal data available to an unlimited group of persons, including publication of personal data in the mass media, posting on information and telecommunications networks, or providing access to personal data by any other means.
2.13. Cross-border transfer of personal data means the transfer of personal data to the territory of a foreign state, to a foreign state authority, a foreign individual or a foreign legal entity.
2.14. Destruction of personal data means any actions as a result of which personal data are irreversibly destroyed so that their content cannot subsequently be restored in the personal data information system and/or the physical media containing personal data are destroyed.
3.1. The Operator has the right to:
- obtain from the personal data subject accurate information and/or documents containing personal data;
- if the personal data subject withdraws consent to personal data processing or submits a request to cease personal data processing, continue processing personal data without the personal data subject's consent where grounds specified in the Personal Data Law exist;
- independently determine the composition and list of measures necessary and sufficient to ensure performance of the obligations established by the Personal Data Law and regulations adopted pursuant thereto, unless otherwise provided by the Personal Data Law or other federal laws.
3.2. The Operator shall:
- at the personal data subject's request, provide information concerning the processing of their personal data;
- arrange personal data processing in accordance with the procedure established by the applicable laws of the Russian Federation;
- respond to applications and requests from personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Law;
- provide the authority responsible for protecting the rights of personal data subjects, at that authority's request, with the necessary information within 10 days of receiving the request;
- publish or otherwise provide unrestricted access to this Personal Data Processing Policy;
- take legal, organizational and technical measures to protect personal data against unauthorized or accidental access, destruction, alteration, blocking, copying, provision or distribution, as well as against other unlawful actions involving personal data;
- cease the transfer (distribution, provision or access) and processing of personal data and destroy personal data in the manner and cases provided for by the Personal Data Law;
- perform other obligations stipulated by the Personal Data Law.
4.1. Personal data subjects have the right to:
- obtain information concerning the processing of their personal data, except in cases provided for by federal laws;
- require the Operator to clarify, block or destroy their personal data if the personal data are incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the stated purpose of processing, and to take measures prescribed by law to protect their rights;
- give prior consent to the processing of personal data for the purpose of promoting goods, works and services on the market;
- withdraw consent to personal data processing and submit a request to cease personal data processing;
- appeal to the authority responsible for protecting the rights of personal data subjects or to a court against unlawful acts or omissions by the Operator in processing their personal data;
- exercise other rights provided for by the laws of the Russian Federation.
4.2. Personal data subjects shall:
- provide the Operator with accurate information about themselves;
- notify the Operator of any clarification (update or change) to their personal data.
4.3. Persons who provide the Operator with inaccurate information about themselves, or information about another personal data subject without that person's consent, shall be liable in accordance with the laws of the Russian Federation.
5.1. Personal data shall be processed lawfully and fairly.
5.2. Personal data processing shall be limited to achieving specific, predetermined and lawful purposes. Personal data may not be processed in a manner incompatible with the purposes for which the personal data were collected.
5.3. Databases containing personal data processed for mutually incompatible purposes may not be combined.
5.4. Only personal data that meet the purposes of their processing shall be processed.
5.5. The content and volume of personal data processed shall correspond to the stated purposes of processing. Personal data processed may not be excessive in relation to the stated purposes of their processing.
5.6. When personal data are processed, their accuracy, sufficiency and, where necessary, relevance to the purposes of processing shall be ensured. The Operator shall take or ensure the taking of necessary measures to delete or clarify incomplete or inaccurate data.
5.7. Personal data shall be stored in a form that permits identification of the personal data subject for no longer than required by the purposes of personal data processing, unless a storage period is established by federal law or by an agreement to which the personal data subject is a party, beneficiary or guarantor. Personal data processed shall be destroyed or depersonalized once the purposes of processing have been achieved or the need to achieve those purposes has ceased, unless otherwise provided by federal law.
Purpose of processing: informing the User by sending emails.
Personal data:
surname, first name and patronymic
email address
telephone numbers
the website also collects and processes depersonalized visitor data (including cookies) using internet statistics services (Yandex Metrica and similar services)
Legal grounds: agreements entered into between the Operator and the personal data subject.
Types of personal data processing: sending informational messages to an email address and other types not prohibited by law.
7.1. Personal data shall be processed with the consent of the personal data subject to the processing of their personal data. The personal data subject's consent may be obtained by the subject selecting the mark provided by the information system in the relevant form offered by the Operator on the Website, as well as by other means not prohibited by law.
Personal data may be processed without the consent of the personal data subject in the following cases:
7.2. Personal data processing is necessary to achieve purposes stipulated by an international treaty of the Russian Federation or by law, or for the Operator to exercise the functions, powers and duties assigned to it by the laws of the Russian Federation.
7.3. Personal data processing is necessary for the administration of justice or enforcement of a judicial act or an act of another authority or official that is enforceable under the laws of the Russian Federation on enforcement proceedings.
7.4. Personal data processing is necessary to perform an agreement to which the personal data subject is a party, beneficiary or guarantor, or to enter into an agreement at the initiative of the personal data subject or an agreement under which the personal data subject will be a beneficiary or guarantor.
7.5. Personal data processing is necessary to exercise the rights and legitimate interests of the Operator or third parties, or to achieve socially significant purposes, provided that the rights and freedoms of the personal data subject are not thereby infringed.
7.6. Personal data are processed where the personal data subject has granted access to an unlimited number of persons or has requested such access (the "publicly available personal data").
7.7. Personal data subject to publication or mandatory disclosure under federal law are processed.
The security of personal data processed by the Operator is ensured through legal, organizational and technical measures necessary for full compliance with the applicable requirements for personal data protection and specified in the Operator's notification of personal data processing.
8.1. The Operator shall safeguard personal data and take all possible measures to prevent unauthorized persons from gaining access to personal data.
8.2. Under no circumstances shall the User's personal data be transferred to third parties, except where required to comply with applicable law or where the personal data subject has consented to the Operator transferring the data to a third party for the performance of obligations under a civil-law agreement.
8.3. If inaccuracies are identified in personal data, the User may update them by sending the Operator a notice to anna.taratorkina@gmail.com marked "Personal Data Update."
8.4. The period for processing personal data shall be determined by the achievement of the purposes for which the personal data were collected, unless another period is provided for by an agreement or applicable law.
The User may withdraw their consent to personal data processing at any time by sending the Operator a notice by email to anna.taratorkina@gmail.com marked "Withdrawal of Consent to Personal Data Processing."
8.5. All information collected by third-party services, including payment systems, communications providers and other service providers, shall be stored and processed by those persons (operators) in accordance with their User Agreement and Privacy Policy. The personal data subject shall familiarize themselves with the specified documents. The Operator shall not be liable for the actions of third parties, including the service providers referred to in this clause.
8.6. Prohibitions imposed by the personal data subject on transfer (other than provision of access), as well as on the processing or conditions of processing (other than obtaining access) of personal data authorized for distribution, shall not apply where personal data are processed in state, public or other public interests defined by the laws of the Russian Federation.
8.7. The Operator shall ensure the confidentiality of personal data when processing them.
8.8. The Operator shall store personal data in a form that permits identification of the personal data subject for no longer than required by the purposes of personal data processing, unless the personal data storage period is established by federal law or by an agreement to which the personal data subject is a party, beneficiary or guarantor.
8.9. Personal data processing may cease when the purposes of processing are achieved, the personal data subject's consent expires, the personal data subject withdraws consent or requests that processing cease, or unlawful processing of personal data is identified.
9.1. The Operator shall collect, record, systematize, accumulate, store, clarify (update or alter), retrieve, use, transfer (distribute, provide or grant access to), depersonalize, block, delete and destroy personal data.
9.2. The Operator shall carry out automated processing of personal data, with or without receiving and/or transmitting the information obtained over information and telecommunications networks.
10.1. Before commencing cross-border transfers of personal data, the Operator shall notify the authority responsible for protecting the rights of personal data subjects of its intention to carry out cross-border transfers of personal data (this notice shall be submitted separately from the notice of intent to process personal data).
10.2. Before submitting the above notice, the Operator shall obtain the relevant information from the authorities of the foreign state and from the foreign individuals or foreign legal entities to which the cross-border transfer of personal data is planned.
The Operator and other persons who have obtained access to personal data shall not disclose personal data to third parties or distribute personal data without the consent of the personal data subject, unless otherwise provided by federal law.
12.1. The User may obtain clarification on any matters concerning the processing of their personal data by contacting the Operator at anna.taratorkina@gmail.com.
12.2. This document shall reflect any changes to the Operator's Personal Data Processing Policy. The Policy shall remain in effect indefinitely until replaced by a new version.
12.3. The current version of the Policy is freely available online at _______________